@cleocode/contracts 2026.5.121 → 2026.5.123

package/src/evidence-atom-schema.ts

@@ -195,6 +195,117 @@ export const callsiteCoverageAtomSchema = z.object({
     .min(1, 'callsite-coverage atom requires a non-empty relativeSourcePath'),
 });
 
+// ---------------------------------------------------------------------------
+// ADR-079-r2: satisfies atom — cross-task AC binding
+// ---------------------------------------------------------------------------
+
+/**
+ * Strict AC UUID regex (lowercase, hyphenated 8-4-4-4-12 with v4/v5 major
+ * version nibble and `[89ab]` variant nibble). T10586 keeps legacy random
+ * UUIDv4 AC ids valid while allowing deterministic UUIDv5-shaped ids derived
+ * from task id + source key.
+ *
+ * Validators MUST reject mixed-case to prevent silent dedupe failures — the
+ * canonical column casing is lowercase per ADR-079-r1 §2.1.
+ *
+ * @task T10506
+ * @adr ADR-079-r2 §2.1
+ */
+export const AC_UUID_REGEX =
+  /^[0-9a-f]{8}-[0-9a-f]{4}-[45][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+
+/**
+ * Positional-alias regex for `satisfies:` atom target-AC identifiers per
+ * ADR-079-r2 §2.1 ABNF (`ac-alias` production). Format: `AC<1-4 digits>`
+ * (capped at AC9999 — three orders of magnitude above realistic per-task AC
+ * counts).
+ *
+ * @task T10506
+ * @adr ADR-079-r2 §2.1
+ */
+export const AC_ALIAS_REGEX = /^AC[0-9]{1,4}$/;
+
+/**
+ * Task-id regex for `satisfies:` atom target-task identifiers per ADR-079-r2
+ * §2.1 ABNF (`task-id` production). Format: `T<1-7 digits>` (capped at
+ * T9999999 — three orders of magnitude above current CLEO task IDs as of
+ * 2026-05-24).
+ *
+ * @task T10506
+ * @adr ADR-079-r2 §2.1
+ */
+export const SATISFIES_TASK_ID_REGEX = /^T[0-9]{1,7}$/;
+
+/**
+ * Version-pin regex for `satisfies:` atom optional `@<ts>` suffix per
+ * ADR-079-r2 §2.1 ABNF (`version-pin` production). Format: `YYYYMMDDhhmmss`
+ * (ISO-8601-basic timestamp, 14 digits).
+ *
+ * @task T10506
+ * @adr ADR-079-r2 §2.1
+ */
+export const SATISFIES_VERSION_PIN_REGEX = /^[0-9]{14}$/;
+
+/**
+ * `satisfies:<task-id>#<ac-id>[@<version-pin>]` atom — cross-task AC binding
+ * per ADR-079-r2 §2.1 (full grammar) and ADR-079-r1 §2.4 (basic shape).
+ *
+ * Format:
+ *
+ *   - `satisfies:T1234#a1b2c3d4-5e6f-4890-abcd-ef1234567890`   — canonical
+ *     UUID form (preferred for long-lived specs).
+ *   - `satisfies:T1234#AC2`                                    — positional
+ *     alias form (preferred in fresh PRs where the target task's AC list
+ *     is stable).
+ *   - `satisfies:T1234#AC2@20260524223045`                     — alias +
+ *     optional version-pin (Validator emissions where pin-on-mint is
+ *     required by ADR-079-r2 §3.4).
+ *
+ * Exactly ONE of `targetAcId` (UUID form) or `targetAcAlias` (alias form)
+ * is populated per parsed atom. `versionPin` is always optional.
+ *
+ * ## Scope
+ *
+ * This Zod schema covers PARSING ONLY. The runtime validator semantics —
+ * the 5-check accept/reject pipeline (target exists, target not terminal,
+ * AC exists, same-saga scope rule) — ship in T10507 alongside the
+ * `evidence_satisfies_bindings` side-effect table.
+ *
+ * Per ADR-079-r2 §2.2 the maximum atom length is 120 chars; the schema does
+ * NOT enforce length here because the per-field regexes already cap the
+ * surface (`satisfies:` + 8-char T+digits + `#` + 36-char UUID + `@` +
+ * 14-char pin = 78 chars max — well under 120).
+ *
+ * @task T10506
+ * @adr ADR-079-r2 §2.1
+ * @adr ADR-079-r1 §2.4
+ */
+export const satisfiesAtomSchema = z.object({
+  kind: z.literal('satisfies'),
+  /** Target task ID — `T<1-7 digits>` per ADR-079-r2 §2.1. */
+  targetTaskId: z
+    .string()
+    .regex(SATISFIES_TASK_ID_REGEX, 'satisfies atom targetTaskId must match /^T[0-9]{1,7}$/'),
+  /** Lowercase UUIDv4/v5 — populated for the canonical form; undefined for alias form. */
+  targetAcId: z
+    .string()
+    .regex(AC_UUID_REGEX, 'satisfies atom targetAcId must be a lowercase UUIDv4/v5')
+    .optional(),
+  /** Positional alias `AC<1-4 digits>` — populated for alias form; undefined for UUID form. */
+  targetAcAlias: z
+    .string()
+    .regex(AC_ALIAS_REGEX, 'satisfies atom targetAcAlias must match /^AC[0-9]{1,4}$/')
+    .optional(),
+  /** Optional `@<14-digit YYYYMMDDhhmmss>` pin captured at mint time. */
+  versionPin: z
+    .string()
+    .regex(
+      SATISFIES_VERSION_PIN_REGEX,
+      'satisfies atom versionPin must be 14 digits (YYYYMMDDhhmmss)',
+    )
+    .optional(),
+});
+
 // ---------------------------------------------------------------------------
 // Discriminated union
 // ---------------------------------------------------------------------------
@@ -218,6 +329,8 @@ export const callsiteCoverageAtomSchema = z.object({
  *   - `pr`                 — merged-PR retroactive proof (T9764 / T9838)
  *   - `loc-drop`           — engine-migration LOC reduction (T1604)
  *   - `callsite-coverage`  — exported-symbol production callsite (T1605)
+ *   - `satisfies`          — cross-task AC binding (T10506 / ADR-079-r2;
+ *                            validator semantics ship in T10507)
  *
  * @task T10337
  * @adr ADR-051
@@ -233,6 +346,7 @@ export const EvidenceAtomSchema = z.discriminatedUnion('kind', [
   prAtomSchema,
   locDropAtomSchema,
   callsiteCoverageAtomSchema,
+  satisfiesAtomSchema,
 ]);
 
 /**
@@ -383,6 +497,7 @@ const ATOM_EXAMPLES: Readonly<Record<EvidenceAtomKind, string>> = Object.freeze(
   pr: 'pr:357',
   'loc-drop': 'loc-drop:<fromLines>:<toLines>',
   'callsite-coverage': 'callsite-coverage:<symbolName>:<relativeSourcePath>',
+  satisfies: 'satisfies:T1234#AC2',
 });
 
 /**
@@ -718,6 +833,78 @@ export function parseEvidenceString(raw: string): EvidenceAtom[] {
         atoms.push({ kind: 'callsite-coverage', symbolName, relativeSourcePath });
         break;
       }
+      case 'satisfies': {
+        // ADR-079-r2 §2.1 ABNF:
+        //   satisfies-atom = "satisfies:" task-id "#" ac-id [ "@" version-pin ]
+        // Payload shape: <task-id>#<ac-id>[@<version-pin>]
+        //
+        // PARSING ONLY per T10506 — runtime validator semantics (5-check
+        // accept pipeline + same-saga scope rule) ship in T10507.
+        const hashIdx = payload.indexOf('#');
+        if (hashIdx < 1 || hashIdx === payload.length - 1) {
+          throw new EvidenceParseError(
+            `Malformed satisfies atom: "${chunk}" (expected satisfies:<task-id>#<ac-id>[@<version-pin>])`,
+            'Use format: satisfies:T1234#AC2 or satisfies:T1234#<uuid> e.g. satisfies:T10506#AC1',
+          );
+        }
+        const targetTaskId = payload.slice(0, hashIdx).trim();
+        const acAndPin = payload.slice(hashIdx + 1).trim();
+
+        // task-id must match strict ABNF /^T[0-9]{1,7}$/
+        if (!SATISFIES_TASK_ID_REGEX.test(targetTaskId)) {
+          throw new EvidenceParseError(
+            `satisfies atom targetTaskId "${targetTaskId}" must match /^T[0-9]{1,7}$/ in "${chunk}"`,
+            'Use format: satisfies:T<digits>#<ac-id> e.g. satisfies:T1234#AC2',
+          );
+        }
+
+        // Split optional version-pin (after `@`)
+        const atIdx = acAndPin.indexOf('@');
+        let acIdRaw: string;
+        let versionPin: string | undefined;
+        if (atIdx === -1) {
+          acIdRaw = acAndPin;
+          versionPin = undefined;
+        } else {
+          if (atIdx < 1 || atIdx === acAndPin.length - 1) {
+            throw new EvidenceParseError(
+              `Malformed satisfies atom version-pin in "${chunk}" (expected <ac-id>@<14-digit YYYYMMDDhhmmss>)`,
+              'Use format: satisfies:T1234#AC2@20260524223045',
+            );
+          }
+          acIdRaw = acAndPin.slice(0, atIdx).trim();
+          versionPin = acAndPin.slice(atIdx + 1).trim();
+          if (!SATISFIES_VERSION_PIN_REGEX.test(versionPin)) {
+            throw new EvidenceParseError(
+              `satisfies atom versionPin "${versionPin}" must be 14 digits (YYYYMMDDhhmmss) in "${chunk}"`,
+              'Use format: satisfies:T1234#AC2@<YYYYMMDDhhmmss> e.g. satisfies:T1234#AC2@20260524223045',
+            );
+          }
+        }
+
+        // ac-id is EITHER a strict UUIDv4/v5 OR an AC<digits> alias — exactly one.
+        let targetAcId: string | undefined;
+        let targetAcAlias: string | undefined;
+        if (AC_UUID_REGEX.test(acIdRaw)) {
+          targetAcId = acIdRaw;
+        } else if (AC_ALIAS_REGEX.test(acIdRaw)) {
+          targetAcAlias = acIdRaw;
+        } else {
+          throw new EvidenceParseError(
+            `satisfies atom ac-id "${acIdRaw}" must be either a lowercase UUIDv4/v5 or AC<1-4 digits> in "${chunk}"`,
+            'Use format: satisfies:T1234#AC2 (alias) or satisfies:T1234#<lowercase-uuidv4-or-v5> (canonical)',
+          );
+        }
+
+        atoms.push({
+          kind: 'satisfies',
+          targetTaskId,
+          ...(targetAcId !== undefined ? { targetAcId } : {}),
+          ...(targetAcAlias !== undefined ? { targetAcAlias } : {}),
+          ...(versionPin !== undefined ? { versionPin } : {}),
+        });
+        break;
+      }
       case 'state': {
         // T9838: explicit-form modifier for the preceding pr: atom.
         // Format: pr:<num>;state:MERGED. The resolver always requires
@@ -743,7 +930,7 @@ export function parseEvidenceString(raw: string): EvidenceAtom[] {
       default:
         throw new EvidenceParseError(
           `Unknown evidence kind: "${kind}" in atom "${chunk}"`,
-          'Valid kinds: commit, files, test-run, tool, url, note, loc-drop, callsite-coverage, decision, pr, state',
+          'Valid kinds: commit, files, test-run, tool, url, note, loc-drop, callsite-coverage, decision, pr, satisfies, state',
         );
     }
   }

package/src/exit-codes.ts

@@ -224,6 +224,29 @@ export enum ExitCode {
    * @task T9230
    */
   LEAD_BYPASS_DETECTED = 107,
+
+  /**
+   * `cleo complete <tid>` was rejected because one or more acceptance criteria
+   * on the task have no `evidence_ac_bindings` rows pointing at them. The
+   * coverage gate is the load-bearing IVTR closure piece — every AC the task
+   * declared MUST be backed by a `direct`, `satisfies`, or `coverage` binding
+   * before completion is allowed.
+   *
+   * `error.details.unsatisfied` carries the list of offending ACs (each row
+   * has `acId`, `alias` (`AC<n>`), and `text`). Recovery options:
+   *   1. Add programmatic evidence that resolves the AC via `cleo verify` so
+   *      a binding row is written.
+   *   2. Pass `--waive-ac "<csv>" --waive-reason "<text>"` on `cleo complete`
+   *      to record an audited waiver (`.cleo/audit/ac-waiver.jsonl`).
+   *   3. Set `CLEO_OWNER_OVERRIDE=1` + `CLEO_OWNER_OVERRIDE_REASON=<text>` for
+   *      a full bypass (logged to `.cleo/audit/force-bypass.jsonl`).
+   *
+   * @codeName E_AC_COVERAGE_INCOMPLETE
+   * @task T10509
+   * @saga T10377 (SG-IVTR-AC-BINDING)
+   * @adr ADR-079-r4
+   */
+  AC_COVERAGE_INCOMPLETE = 108,
 }
 
 // ---------------------------------------------------------------------------
@@ -362,6 +385,25 @@ export const E_INVALID_SEVERITY_VALUE = 'E_INVALID_SEVERITY_VALUE' as const;
  */
 export const E_INVALID_PIPELINE_STAGE = 'E_INVALID_PIPELINE_STAGE' as const;
 
+/**
+ * E_AC_COVERAGE_INCOMPLETE — `cleo complete <tid>` was rejected because at
+ * least one acceptance criterion on the task has no `evidence_ac_bindings`
+ * row. The coverage gate is the load-bearing IVTR closure piece — every AC
+ * the task declared MUST be backed by a binding (`direct`, `satisfies`, or
+ * `coverage`) before completion is allowed.
+ *
+ * `error.details.unsatisfied` carries the offending ACs (each entry has
+ * `acId`, `alias`, and `text`). Recovery options live on the {@link ExitCode.AC_COVERAGE_INCOMPLETE}
+ * JSDoc.
+ *
+ * Maps to {@link ExitCode.AC_COVERAGE_INCOMPLETE} (108) at the CLI boundary.
+ *
+ * @task T10509
+ * @saga T10377 (SG-IVTR-AC-BINDING)
+ * @adr ADR-079-r4
+ */
+export const E_AC_COVERAGE_INCOMPLETE = 'E_AC_COVERAGE_INCOMPLETE' as const;
+
 /** Check if an exit code represents an error (1-99). */
 export function isErrorCode(code: ExitCode): boolean {
   return code >= 1 && code < 100;

package/src/index.ts

@@ -199,7 +199,7 @@ export {
 } from './branch-lock.js';
 export type { AdapterCapabilities } from './capabilities.js';
 // === Changesets (CLEO-native task-anchored DSL — T9738) ===
-export type { ChangesetEntry, ChangesetKind } from './changesets.js';
+export type { ChangesetEntry, ChangesetKind, ChangesetReleaseNoteSection } from './changesets.js';
 export { CHANGESET_KINDS, ChangesetEntrySchema } from './changesets.js';
 // === CLI Category Types (help renderer grouping SSoT) ===
 export type { CliCategory } from './cli-category.js';
@@ -257,6 +257,8 @@ export type {
   DepsRequiredAt,
   EnforcementProfile,
   HierarchyConfig,
+  LeadRollupConfig,
+  LeadRollupMode,
   LifecycleConfig,
   LifecycleEnforcementMode,
   LlmConfig,
@@ -288,11 +290,19 @@ export type {
 export { parseClaudeCodeCredentials } from './credentials.js';
 // === DataAccessor Interface ===
 export type {
+  AcBindingRow,
+  AcProjectionAuditFinding,
+  AcProjectionAuditFindingCode,
+  AcProjectionAuditResult,
+  AcProjectionAuditStatus,
+  AcRow,
   ArchiveFields,
   ArchiveFile,
   DataAccessor,
   DataAccessorAgentInstance,
   QueryTasksResult,
+  TaskAuditLogQuery,
+  TaskAuditLogRow,
   TaskFieldUpdates,
   TaskQueryFilters,
   TransactionAccessor,
@@ -480,6 +490,8 @@ export type {
   GateEvidenceRequirement,
 } from './evidence-atom-schema.js';
 export {
+  AC_ALIAS_REGEX,
+  AC_UUID_REGEX,
   callsiteCoverageAtomSchema,
   commitAtomSchema,
   decisionAtomSchema,
@@ -493,6 +505,9 @@ export {
   noteAtomSchema,
   parseEvidenceString,
   prAtomSchema,
+  SATISFIES_TASK_ID_REGEX,
+  SATISFIES_VERSION_PIN_REGEX,
+  satisfiesAtomSchema,
   testRunAtomSchema,
   toolAtomSchema,
   urlAtomSchema,
@@ -527,6 +542,8 @@ export {
 } from './evidence-record-schema.js';
 // === Exit Codes ===
 export {
+  // T10509 / Saga T10377 — AC-coverage gate at cleo complete (IVTR closure)
+  E_AC_COVERAGE_INCOMPLETE,
   // T10105 / Saga T10099 — fail-loud changeset parse
   E_CHANGESET_YAML_INVALID,
   // SPEC-T9345 release pipeline v2 error code names (T9525)
@@ -830,6 +847,20 @@ export type {
   WikiStateFile,
   WikiSymbolRow,
 } from './nexus-wiki-ops.js';
+// === Operation-aware LAFS envelope validation (T10610) ===
+export type {
+  OperationEnvelopeName,
+  OperationEnvelopeValidationIssue,
+  OperationEnvelopeValidationOptions,
+  OperationEnvelopeValidationResult,
+} from './operation-envelope-validation.js';
+export {
+  E_LAFS_OPERATION_ERROR_SHAPE,
+  E_LAFS_OPERATION_RESULT_SCHEMA,
+  E_LAFS_OPERATION_UNREGISTERED,
+  OPERATION_RESULT_SCHEMAS,
+  validateOperationEnvelope,
+} from './operation-envelope-validation.js';
 // Admin operation param/result types — re-exported at top level for typed-dispatch consumers
 // (T1426 Wave D · typed-narrowing migration for admin domain)
 export type {
@@ -915,6 +946,14 @@ export type {
   EvaluateDialecticParams,
   EvaluateDialecticResult,
 } from './operations/dialectic.js';
+// === Docs Operation Types (T10618 — docs.update lifecycle status SSoT) ===
+// Re-exported at top level so core and CLI layers can consume the same
+// operation contract without relying on an unexported package subpath.
+export {
+  DOCS_LIFECYCLE_STATUSES,
+  type DocsLifecycleStatus,
+  type DocsUpdateParams,
+} from './operations/docs.js';
 // === Operations Types (API wire format, namespaced to avoid collision with domain types) ===
 export * as ops from './operations/index.js';
 // === Operation Input Contracts (T9914 / Saga T9855 / E7) ===
@@ -1192,7 +1231,12 @@ export type {
   UserProfileTrait,
 } from './operations/nexus-user-profile.js';
 // Commonly used ops types re-exported at top level for convenience
-export type { BrainState } from './operations/orchestrate.js';
+export type {
+  BrainState,
+  OrchestrateReportEntry,
+  OrchestrateReportGroup,
+  OrchestrateReportParams,
+} from './operations/orchestrate.js';
 // ParamDef contract — re-exported at top level (SSoT for all operation param descriptors)
 export type {
   CittyArgDef,
@@ -1275,7 +1319,9 @@ export type {
   DepGraphIssue,
   DepsTreeEdge,
   DepsTreeNode,
+  TaskShowAcRowEntry,
   TaskShowAttachmentEntry,
+  TaskShowRelationsEntry,
   TasksAddBatchEntry,
   TasksAddBatchParams,
   TasksAddBatchResult,
@@ -1295,6 +1341,15 @@ export type {
   TasksCompleteQueryResult,
   TasksComplexityEstimateParams,
   TasksComplexityEstimateResult,
+  // T10629 — task context pack types
+  TasksContextAcceptanceEntry,
+  TasksContextActivityEvent,
+  TasksContextBlockerEntry,
+  TasksContextBudget,
+  TasksContextDocEntry,
+  TasksContextOmission,
+  TasksContextParams,
+  TasksContextResult,
   TasksCurrentParams,
   TasksCurrentResult,
   TasksDeleteQueryParams,
@@ -1321,6 +1376,9 @@ export type {
   TasksOps,
   TasksPlanParams,
   TasksPlanResult,
+  TasksRelatesAddBatchEntry,
+  TasksRelatesAddBatchParams,
+  TasksRelatesAddBatchResult,
   TasksRelatesAddParams,
   TasksRelatesAddResult,
   TasksRelatesParams,
@@ -1345,8 +1403,14 @@ export type {
   TasksSagaMembersResult,
   TasksSagaRollupParams,
   TasksSagaRollupResult,
+  TasksScopeMember,
+  TasksScopeReadyEntry,
+  TasksScopeRollup,
   TasksShowParams,
   TasksShowResult,
+  TasksSliceNode,
+  TasksSliceParams,
+  TasksSliceResult,
   TasksStartQueryParams,
   TasksStartQueryResult,
   TasksStopQueryParams,
@@ -1881,6 +1945,7 @@ export type {
   MinimalTaskRecord,
   TaskRecord,
   TaskRecordRelation,
+  TaskRecordRelationCounts,
   ValidationHistoryEntry,
 } from './task-record.js';
 // === Task Sync Types (provider-agnostic reconciliation) ===
@@ -1911,10 +1976,40 @@ export {
 } from './tasks/archive.js';
 // === Task Domain Result Types (T1703 — canonical shapes for operations/tasks.ts stubs) ===
 export type {
+  CompletionBlockerReason,
+  CompletionContextPack,
+  CompletionContextPackOptions,
+  CompletionContextPackSummary,
+  CompletionCriterionEvaluation,
+  CompletionCriterionKind,
+  CompletionCriterionReplacement,
+  CompletionCriterionStatus,
+  CompletionCriterionWaiver,
+  CompletionEvaluateParams,
+  CompletionEvaluateResult,
+  CompletionEvaluation,
+  CompletionExplainParams,
+  CompletionExplainResult,
+  CompletionExplanation,
+  CompletionHistoryEvent,
+  CompletionHistoryEventAction,
+  CompletionHistoryEventRelation,
+  CompletionListParams,
+  CompletionListResult,
+  CompletionProjectionRepairError,
+  CompletionProjectionRepairErrorCode,
+  CompletionProjectionRepairParams,
+  CompletionProjectionRepairResult,
+  CompletionStaleReason,
   TaskComplexityFactor,
   TaskDependsRef,
   TaskDependsResult,
   TaskLabelInfo,
+  TaskMutationBucket,
+  TaskMutationDryRunSummary,
+  TaskMutationEnvelope,
+  TaskMutationWarning,
+  TaskMutationWarningSeverity,
   TaskPlanBlockedTask,
   TaskPlanInProgressEpic,
   TaskPlanMetrics,
@@ -1929,6 +2024,19 @@ export type {
   TaskViewNextAction,
   TaskViewPipelineStage,
 } from './tasks.js';
+export {
+  completionCriterionEvaluationSchema,
+  completionEvaluateParamsSchema,
+  completionEvaluationSchema,
+  completionExplainParamsSchema,
+  completionExplanationSchema,
+  completionListParamsSchema,
+  completionListResultSchema,
+  completionProjectionRepairErrorSchema,
+  completionProjectionRepairParamsSchema,
+  completionProjectionRepairResultSchema,
+  unsatisfiedCompletionCriterionSchema,
+} from './tasks.js';
 // === Template Manifest (T9875 / Saga T9855) ===
 export type {
   PlaceholderSource,
@@ -1994,6 +2102,31 @@ export type {
   Transport,
   TransportConnectConfig,
 } from './transport.js';
+// === Validator Role Contracts (T10510 / Saga T10377 SG-IVTR-AC-BINDING) ===
+// Canonical AgentRole enum + per-AC ValidatorFinding + ValidatorAttestation /
+// ValidatorRejection envelopes + ValidatorVerdict discriminated union. Consumed
+// by SDK tools (T10511) and the Max-N runtime (T10512) under Epic T10383
+// E-VALIDATOR-ROLE.
+export type {
+  AgentRole,
+  ValidatorAttestation,
+  ValidatorFinding,
+  ValidatorFindingStatus,
+  ValidatorRejection,
+  ValidatorVerdict,
+} from './validator/index.js';
+export {
+  AGENT_ROLES,
+  isAgentRole,
+  isValidatorAttestation,
+  isValidatorRejection,
+  isValidatorVerdict,
+  VALIDATOR_ID_REGEX,
+  validatorAttestationSchema,
+  validatorFindingSchema,
+  validatorRejectionSchema,
+  validatorVerdictSchema,
+} from './validator/index.js';
 // === WarpChain Types ===
 export type {
   ChainShape,
@@ -2009,4 +2142,99 @@ export type {
   WarpLink,
   WarpStage,
 } from './warp-chain.js';
+export type {
+  TasksFrontierParamsInput,
+  TasksRollupParamsInput,
+  TasksTraverseParamsInput,
+  TasksTreeParamsInput,
+  TasksWorkGraphAuditParamsInput,
+  WorkGraphAudienceMode,
+  WorkGraphAuditOptions,
+  WorkGraphAuditResult,
+  WorkGraphContainmentAncestorsResult,
+  WorkGraphContainmentChildrenResult,
+  WorkGraphContainmentNode,
+  WorkGraphContainmentQueryService,
+  WorkGraphContextBudget,
+  WorkGraphContextPack,
+  WorkGraphContextPackParams,
+  WorkGraphDependencyEdge,
+  WorkGraphDirectEdge,
+  WorkGraphEdge,
+  WorkGraphEdgeDirection,
+  WorkGraphEdgeSource,
+  WorkGraphHierarchyInputNode,
+  WorkGraphHierarchyValidationOptions,
+  WorkGraphHierarchyValidationResult,
+  WorkGraphHierarchyViolation,
+  WorkGraphNode,
+  WorkGraphNodeRef,
+  WorkGraphOmission,
+  WorkGraphOmissionReason,
+  WorkGraphPageInfo,
+  WorkGraphPaginationOptions,
+  WorkGraphPercentDenominator,
+  WorkGraphPlanningDoc,
+  WorkGraphPlanningDocParams,
+  WorkGraphProjectionMismatch,
+  WorkGraphReader,
+  WorkGraphReadinessParams,
+  WorkGraphReadinessResult,
+  WorkGraphReadyFrontierBlockedBy,
+  WorkGraphReadyFrontierOptions,
+  WorkGraphReadyFrontierResult,
+  WorkGraphReadyFrontierTask,
+  WorkGraphRelationEdge,
+  WorkGraphRelationEdgesOptions,
+  WorkGraphRelationEdgesResult,
+  WorkGraphRelationKind,
+  WorkGraphRelationQueryService,
+  WorkGraphRollupCounts,
+  WorkGraphScaffoldApplyParams,
+  WorkGraphScaffoldApplyResult,
+  WorkGraphScaffoldValidateParams,
+  WorkGraphScaffoldValidateResult,
+  WorkGraphScaffoldValidationIssue,
+  WorkGraphSlice,
+  WorkGraphSliceParams,
+  WorkGraphSnapshot,
+  WorkGraphSubtreePercentages,
+  WorkGraphSubtreeSummaryOptions,
+  WorkGraphSubtreeSummaryResult,
+  WorkGraphTaskRelationType,
+  WorkGraphTraversalDirection,
+  WorkGraphTraversalOptions,
+  WorkGraphTraversalResult,
+  WorkGraphTreeNode,
+  WorkGraphTreeOptions,
+  WorkGraphTreeResult,
+} from './workgraph.js';
+// === PM-Core V2 WorkGraph public contracts ===
+export {
+  E_WORKGRAPH_PARENT_TYPE_MATRIX,
+  tasksFrontierParamsSchema,
+  tasksFrontierResultSchema,
+  tasksRollupParamsSchema,
+  tasksRollupResultSchema,
+  tasksTraverseParamsSchema,
+  tasksTraverseResultSchema,
+  tasksTreeParamsSchema,
+  tasksTreeResultSchema,
+  tasksWorkGraphAuditParamsSchema,
+  tasksWorkGraphAuditResultSchema,
+  validateWorkGraphHierarchy,
+  WorkGraphHierarchyInvariantError,
+  workGraphContextPackParamsSchema,
+  workGraphContextPackSchema,
+  workGraphPlanningDocParamsSchema,
+  workGraphPlanningDocSchema,
+  workGraphReadinessParamsSchema,
+  workGraphReadinessResultSchema,
+  workGraphScaffoldApplyParamsSchema,
+  workGraphScaffoldApplyResultSchema,
+  workGraphScaffoldValidateParamsSchema,
+  workGraphScaffoldValidateResultSchema,
+  workGraphSliceParamsSchema,
+  workGraphSliceSchema,
+} from './workgraph.js';
 // === WASM SDK (Rust crate bindings) ===